Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
File:                     UqWb8EMIAwY1n1opSR9UWwcFHAU.mft (raw, json)
Hash identifier:          TnWWjiGE5qp/rD4VAs7uE06wdt81ToDq+7qGQ3Kb/sc=
Subject key identifier:   55:1B:82:35:81:35:6A:DD:DE:8F:7B:FB:E9:FF:03:DC:8E:1D:24:80
Authority key identifier: 52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05
Certificate issuer:       /CN=52a59bf043080306359f5a29491f545b07051c05
Certificate serial:       019D98862E17534E9296A24214FAC3135DA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
Manifest number:          18C1
Signing time:             Thu 16 Apr 2026 23:00:23 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:23 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:23 +0000
Files and hashes:         1: Hx2Y_QxMoZhXy4e6JKX5KPRxYeM.roa (hash: 3uzaIFxXEFFxlqJhGt+PM/l/uaNGyKXUk1SwVD4qq1o=)
                          2: UqWb8EMIAwY1n1opSR9UWwcFHAU.crl (hash: L8cyHwptcxpBrHEo8n+RK39Xl9UysfRMDa1587ZckN0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:2e:17:53:4e:92:96:a2:42:14:fa:c3:13:5d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a59bf043080306359f5a29491f545b07051c05
        Validity
            Not Before: Apr 16 23:00:23 2026 GMT
            Not After : Apr 17 23:00:23 2026 GMT
        Subject: CN=551b823581356addde8f7bfbe9ff03dc8e1d2480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:13:8f:e5:f5:84:fd:87:e8:be:8e:09:c5:79:
                    9e:bd:63:1c:54:de:64:3d:d3:2a:6d:11:6c:9b:bc:
                    03:b1:22:e8:37:5a:4f:ac:2c:78:14:a0:e6:48:59:
                    2a:61:64:01:e8:0e:8e:e2:6b:dc:6c:22:7e:16:75:
                    a8:d0:be:a4:d4:e1:51:19:2a:09:99:bc:be:0f:35:
                    4c:86:4a:cf:ff:0a:d2:9d:68:d4:22:df:f6:ee:6c:
                    4d:e8:8a:ea:c8:9d:0d:1c:5b:71:12:66:c9:b3:0d:
                    97:e7:c4:84:85:9b:1c:01:91:92:2e:3f:ac:39:ed:
                    e5:0a:d8:39:92:18:ba:28:2c:c7:47:14:3b:b9:61:
                    17:9a:15:0a:62:de:50:72:91:55:84:aa:44:8e:4b:
                    58:b0:73:39:55:1b:91:70:49:f6:38:97:c4:7e:56:
                    be:da:e6:67:9d:5f:6a:5f:77:a2:9e:2c:4d:69:e9:
                    fc:1b:84:bb:de:29:78:56:8f:25:31:3f:40:14:97:
                    fd:4a:fc:8f:00:6e:4d:36:2d:c6:1a:52:77:bc:01:
                    3e:ab:eb:27:33:4b:19:1f:08:a6:46:96:b1:f5:72:
                    e6:6f:6a:1b:f1:06:f5:88:92:83:3a:b7:55:58:34:
                    24:ef:85:78:e9:26:79:a6:ed:71:78:65:de:40:f0:
                    bc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1B:82:35:81:35:6A:DD:DE:8F:7B:FB:E9:FF:03:DC:8E:1D:24:80
            X509v3 Authority Key Identifier:
                keyid:52:A5:9B:F0:43:08:03:06:35:9F:5A:29:49:1F:54:5B:07:05:1C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqWb8EMIAwY1n1opSR9UWwcFHAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6d729e-e16b-41a9-9012-014c70977d49/1/UqWb8EMIAwY1n1opSR9UWwcFHAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:67:d0:97:b0:5d:30:2a:f2:3e:2c:7b:f8:c8:f9:87:15:4d:
         02:fe:ee:c7:71:23:42:48:88:6e:38:a6:9a:c3:0d:2b:1b:20:
         7c:67:ab:f5:d8:78:e2:3b:25:c4:45:b3:c9:41:69:5f:e4:8f:
         f2:84:27:f8:bb:e4:7a:35:3b:cd:06:60:28:68:7e:a1:c1:fd:
         ea:5a:dc:0e:b0:b6:76:f8:20:72:47:1b:d1:02:5d:9a:a7:69:
         47:ea:a8:13:1e:cb:61:df:29:b8:95:a1:ad:86:9c:bf:ac:74:
         80:c0:94:90:9f:fb:77:51:4d:dd:44:e1:52:b8:03:62:ef:78:
         93:20:31:48:64:40:60:fd:39:f0:ca:24:0c:a8:ea:55:86:3c:
         90:78:e9:e0:4a:75:80:1d:4b:e1:e3:78:2c:02:1f:e0:ab:84:
         3b:24:37:ad:44:8b:48:7a:70:99:56:cc:ce:ed:0b:9a:b3:99:
         01:01:79:39:14:5c:45:3a:e2:22:7e:f3:aa:4c:28:8c:8e:74:
         ca:4a:a6:44:89:87:d6:7c:11:4a:c9:46:b3:0d:fa:70:a5:0b:
         0e:70:c3:25:af:34:55:55:62:b7:93:a5:1e:54:2c:9b:84:dc:
         8c:47:f1:e5:46:2d:38:c5:88:89:16:6a:3c:62:de:6c:a1:e4:
         27:f1:3e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:07 2026 by rpki-client